CVE-2024-22167: SanDisk PrivateAccess DLL Hijacking Vulnerability

Published Mar 13, 2024

Updated

A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. This vulnerability is only exploitable locally if an attacker has access to a copy of the user's vault or has already gained access into a user's system. This attack is limited to the system in context and cannot be propagated.

Affected Software

1 affected component

SanDisk PrivateAccess

Remediation

Information

Windows users should upgrade to PrivateAccess version 6.4.10 using this link: PrivateAccess for Windows https://downloads.sandisk.com/downloads/privateaccess-win.exe . To take advantage of the latest security fixes, Western Digital recommends that Windows users promptly update their devices to the latest software. As with any upgrade, it is best to back up your data before installing the upgrade. For support and download information, please refer to our Support Knowledge Base article https://support-en.wd.com/app/answers/detailweb/a_id/49556 .

Event History

Mar 13, 2024

CVE Published

via MITRE·08:43 PM

Data Sourced

via MITRE·08:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-22167?

CVE-2024-22167 is classified as a high-severity vulnerability due to the potential for arbitrary code execution.

How do I fix CVE-2024-22167?

To fix CVE-2024-22167, ensure you update the SanDisk PrivateAccess application to the latest version provided by the vendor.

Who is affected by CVE-2024-22167?

CVE-2024-22167 affects users of the SanDisk PrivateAccess application on Windows systems.

Can CVE-2024-22167 be exploited remotely?

CVE-2024-22167 is only exploitable locally, requiring an attacker to have access to the user's vault.

What kind of attacks can CVE-2024-22167 enable?

CVE-2024-22167 could enable an attacker to execute arbitrary code in the context of the system user.